MAL-2025-96493 Malicious code in secure_wombat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a76c7636a65f8464ef342766f0d5ea51882170944bb697e9b1432f7f3cecf76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95915 Malicious code in pleasant_pike_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d275d9230160db8f8882a9901e0773dd737bf940f9f364cdc582d0befe08319 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-miemee40-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d00cfff0ac7369fd2c7a17380d3f27142f2a5226155a3c345f9f0a5f8f5ec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-serimuka69-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 150f1aa84f8a3f2745cfea76e02939409bbfad36cd620b2986f776cce340abc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82940 Malicious code in ade-pisang22-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f78573d373c502b02dbd35b56168516b5736ed957a4c5ca549a22c01124282ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85720 Malicious code in fuzzy_swan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9e236574e1a2a463ed66c4a0725a3fbd54296ead421da2cce0e606bca7d31fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-papeda87-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb42171e44d04f42cec12723ac3280388b8374f8c8a975ba5b4718ef4bfe69e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-oblok75-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94ec8342a5aa73121bce8c86c08652f313313fdba58fc775b45470e8f4d14d3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91283 Malicious code in tuti-mangut31-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c2ede278be1ea132e08929533e907c735e444175e7cebc72190488c62268a02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90391 Malicious code in sari-nasi2-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f07a2cb57e38f1479326e9b8b19724859afbd3b6aed7920c219174ed093fd25e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-kemplang32-crottsekebon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a7ff5668ca89bc52c5d4b59c2cec2d2de214427f1ba7943648d7996f0176d4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-kupat48-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49cb93449c122b545a1e3e45e5f24e23c5b2bda9d305885746fa785b2bb65dd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-lumpur24-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc8c77bf0b85768eb8657bf5f89d6443b76162d3f69ac05feedc70872d7873c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-gembus6-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a491ef27c50d67cd5a88853b7a763747cf86f06f3d91fc1cba3a821d35fe07c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-kue83-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c6c8a88570c3a0ff9a737bf5fbb9cf969a82eef446164a96dd2a844406ad144 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-ronde18-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db4a13db1162e6899590e972f3398c2f05b25370be1ab533426e33f0a5e3e386 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-ketan100-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 561b7c38bb5134128b2206ef6ac9319a746dd6d0120d1f9e5758443219357937 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-mangga43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e61cd416c2a7b452152e129c35dcd545edcaadbdf171f3869b243aebf81356a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-mendoan4-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3eef44c93ae8a8d7474bc51a332fb9ccc3abdd7367d4bf2296acbf4577ad8bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-rawon19-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d27d1db7d2de3fe7bdfbbb6a3693a6f2ea32cdc1fdbaed0b007cee60a9e60ccd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...